CVE-2026-70467
LowCVSS 3.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A Server-Side Request Forgery (SSRF) vulnerability in Fortinet FortiSIEM in multiple versions may allow an attacker to execute unauthorized code or commands.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the system and perform malicious actions, potentially leading to data confidentiality and integrity breaches.
Recommendation
It is recommended to apply vendor-provided patches immediately and restrict access to FortiSIEM to trusted users only.
Original NVD description (English source)
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>